Privacy

Privacy policy

Applies to Hermes Agent · Effective 2026-09-18

Hermes Agent is a private, single-user software application. It runs on hardware owned and operated by Joshua Ford, the owner of this site, and it is used by him and no one else. It is not offered to the public, it has no sign-up, and it has no other accounts. This page explains what the application can access in a Google Account, what happens to that information, and how access can be removed.

What the application can access

With the account owner's explicit consent, Google grants the application access to the following services. Each one is used only to answer a request the owner has made of his own assistant, in the same way a person reads their own mail and calendar to get something done.

The application is not able to access the Google Accounts of any other person. It holds no data belonging to anyone but the account owner.

How the information is used

Information from these services is used for exactly one purpose: to carry out tasks the owner requests of his own assistant, such as finding a message, checking a calendar, or reading a document. It is never used for advertising, profiling, or any purpose unrelated to those requests.

Where the information goes

The assistant runs on hardware in the owner's home, and its records stay there. To interpret a request and draft a response, the relevant excerpt from a Google service may be sent to a third-party language model provider for processing, which is governed by that provider's own terms. No Google user data is sold, rented, or shared with any other party, and none of it is used to train machine learning models at the owner's direction.

This site and this application use no analytics, no cookies, no advertising, and no tracking of any kind.

Google API Services User Data Policy

Hermes Agent's use and transfer of information received from Google APIs to any other application will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In practice that means the data is used only to provide the features described above, is never transferred except as needed to provide or improve those features or as required by law, is never used for advertising, and is never read by humans except with the owner's consent, for security purposes, or to comply with the law.

Storage and retention

Authorization credentials are stored on the owner's own machine with file permissions that restrict them to the owner. There is no server operated by anyone else that holds a copy of this data. Exchanges with the assistant are kept in its local history on that machine, the same way a person keeps their own notes, and the owner can delete that history at any time.

Removing access

Access can be revoked at any time, with immediate effect, from the Google Account's third-party connections page. Revoking access stops all further use. It does not delete the owner's own Google data, which remains exactly as it was and is not held anywhere else.

Contact

Questions about this policy, or about anything above, can go to kj5irq@gmail.com.

Changes

If this policy changes, the effective date at the top of this page changes with it. The current version is always the one published here.